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AMENDMENTS TO THE CLAIMS 

This listing of claims will replace ail prior versions and listings of claims in this 
application: 

listing of Claims: 

1 . (Currently amended) A processor-? rn pie men fed method of selectively 
sharing a plurality of distributed access-controlled documents, comprising: 

a plurality of content providers cooperating to create a privacy-preserving 
index structure; eftel 

grouping the content providers into a plurality of privacy groups; 

the privacy-preserving index structure mapping a plurality of keywords 
representing a content to be shared to the plurality of content providers ; and 

returning a list of the content providers having a subset of the content to be 
shared of the access-controlled documents that comprise a set of the 
keywords that satisfy a query . 

2. (Currently amended) The method of claim I , wherein the content 
providers comprise a provider specific search interface for receiving a the 
puery and for authenticating a searcher. 

3. (Currently amended) The method of claim 2, further comprising the 
searcher submitting the query containing eR .& -or-wor e a t least one of the 
keywords to a privacy-preserving index system. 

4. (Canceled) 
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5. (Original) The method of claim 4, wherein the list of content providers 
comprises at least 50% false positive content providers. 

6. (Original) The method of claim 4 further comprising the searcher 
submitting the query annotated with an identity for the searcher to a specified 
content provider on the list of content providers. (Original) 

7. (Original) The method of claim 6, further comprising the specified 
content provider authenticating the identity of the searcher for allowing 
access to the content to be shared. 

8. (Currently amended) The method of claim 7, further comprising the 
specified content provider returning to the searcher at least one of of a 
plurality of documents that match the one or more keywords. 

9. (Canceled) 

1 0. (Original) The method of claim 1 , wherein the at least one privacy 
group comprises at least three contents. 

1 1 . (Original) The method of ciaim ] , wherein each of the content 
providers is grouped into one privacy group. 

12. (Original) The method of claim 10, further comprising performing a 
randomized Index construction algorithm to create the bit vectors for the 
content providers In the at least one privacy group. 
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13. (Original) The method of claim 12, further comprising arranging the 
content providers in the privacy group in a ring formation. 

14. [Currently amended) The method of claim 13, further comprising 
creating bit vectors for the plurality of content providers for the at least one or 
mer e of the keywords representing a content to be shared. 

15. (Original) The method of claim 14, further comprising combining the 
bit vectors into group vectors. 

16. (Original) The method of claim 15, further comprising storing the 
group vectors in a privacy-preserving index. 

1 7. (Original) The method of claim 13, wherein creating the bit vectors for 
the content providers comprises creating a randomized bit vector. 

18. (Original) The method of claim 1 7, further comprising passing the 
randomized bit vector to a first provider in the ring formation in the privacy 
group. 

19. (Original) The method of claim 12, wherein a content provider 
performs the randomized index construction algorithm to create a provider 
keyword bit vector. 

20. (Original) The method of claim 18, further comprising the first provider 
passing the provider keyword bit vector to a next content provider in the ring 
formation in the privacy group. 
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21 . [Original) The method of claim 1 9, wherein content providers in the 
ring formation sequential perform the randomized index construction 
algorithm on the provider keyword bit vector, 

22. (Original) The method of claim 21, further comprising the content 
providers in the ring formation passing provider keyword bit vectors and 
performing the randomized construction aigorithm on the keyword bit vector 
until the provider keyword bit vector has completed r rounds around the ring 
formation. 

23. (Original) The method of claim 22, further comprising ORing the 
provider keyword bit vectors into a group keyword bit vector. 

24. (Original) The method of claim 23, wherein ORing the provider 
keyword bit vectors into the group keyword bit vector introduces false positives 
in a result returned in response to the query. 

25. (Currently amended) A computer program product having a plurality 
of executable instruction codes stored on a computer readable medium, for 
selectively sharing a plurality of distributed access-controlled documents, 
comprising: 

a plurality of content providers comprising a fer set of instruction codes for 
cooperating to create a privacy-preserving index structure; a-nd 

a set of instruction codes for grouping the content providers info a plurality 
of privacy groups; 
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the privacy-preserving index structure comprising a second set of instruction 
codes for mapping a plurality of keywords representing a content to be shared 
to the plurality of content providers; and 

a set of instruction codes for returning a list of the content providers having 
a subset of the content to be shared of the access-controlled documents that 
comprise a set of the keywords that satisfy a query . 

26. (Currently amended) The computer program product of claim 25.. 
wherein the content providers comprise a ##d set of instruction codes for 
receiving e the query and for authenticating a searcher. 

27, (Currently amended) The computer program product of claim 26, 
further comprising the searcher submitting the query containing one or more at 
least one of the keywords to a privacy-preserving index system. 

28-29. (Canceled) 

30. (Currently amended) The computer program product of claim 29, 
further comprising a Hftb set of instruction codes for performing a randomized 
index construction algorithm to create the bit vectors for the content providers 
in the plurality of privacy groups. 
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31 . (Currently amended) A processor-implemented system for selectively 
sharing a plurality of distributed access-controlled documents, comprising: 

a plurality of content providers that cooperate to create a privacy- 
preserving index structure; af*d 

means for grouping the content providers into a plurality of privacy groups; 

means for the privacy-preserving index structure mop mapping a plurality of 
keywords representing a content to be shared to the plurality of content 
providers ; and 

means for returning a list of the content providers having a subset of the 
content to be shared of the access-controlled documents that comprise a set 
of the keywords that satisfy a query . 

32. (Currently amended) The system of claim 31 , wherein the content 
providers comprise a provider specific search interface for receiving €* the 
query and for authenticating a searcher. 

33. (Currently amended) The system of claim 32, wherein the searcher 
submits the query containing on e or mor e at ieast one of the keywords to a 
privacy-preserving index system. 

34. (Original) The system of claim 33, wherein on receiving the query, at 
least some of the content providers return a list of filtered documents. 

35. (Canceled) 
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